CVEvulnerability

CVE-2020-16100

7.5 HIGH Published 2020-09-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-09-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-404

Description

It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websocket thread due to improper shutdown of closed websocket connections, preventing it from accepting future DCOM websocket (Configuration Client) connections. Affected versions are v8.20 prior to v8.20.1166(MR3), v8.10 prior to v8.10.1211(MR5), v8.00 prior to v8.00.1228(MR6), all versions of 7.90 and earlier.

Affected configurations

• gallagher command centre (>= 8.00 < 8.00.1228) • gallagher command centre (>= 8.10 < 8.10.1211) • gallagher command centre (>= 8.20 < 8.20.1166) • gallagher command centre 8.00.1228 • gallagher command centre 8.10.1211 • gallagher command centre 8.20.1166

Related

Weakness · CWE (1)

  • CWE-404 Improper Resource Shutdown or Release weakness

References